Highly Reliable Systems

channel eSATA

Internal SATA receiver & removable tray

2 Bay eSATA and Tandem

1 Bay Slimline Dual USB/eSATA 5 Bay Minitower eSATA

High-Rely eSATA System Documentation V2.2 READ THIS FIRST Important Quick Information for your High-Rely drive

• DO NOT ATTEMPT TO REMOVE High-Rely media from their drive bays without “unlocking” the drive with the key first! Forced removal of the drive will void your warranty. The key has a mechanical interlock that blocks the drive from being removed.

• High-Rely media will not “power up” until the key lock, on the front of the drive, is turned to the locked and on position. This is by design and prevents accidental media removal. Refer to page 8 and 9 of your manual.

• The latest Service Packs are important! has continued to removable drives on the , XP, and 2003 product lines. If you do not have Service Pack 4 on Windows 2000 or Service pack 1 on XP you may have problems. For example, XP machines without SP1 cannot properly recognize drives above 137GB. While it may appear to work the drive will corrupt data when it fills above that level. Read the manual or our web site for details.

• Not all eSATA ports are created equal. We recommend only controllers based on the Silicon Image chip set for maximum compatibility. Other eSATA ports will only recognize the first drive in a multi-drive system.

• If you are using a multi-drive High-Rely with multiple media sets (for example a 5 bay with 10 hard drives total) you WILL have a drive letter problem as you change your media. Windows will assign drive letters randomly, which causes your backup software to fail. You can use the High-Rely Drive Manager utility HRDM2.MSI to solve this problem. You install HRDM2 on the machine which the High-Rely system will be connected to. See “Understanding the High-Rely Drive Manager” in this manual.

• If you use Veritas , only version 9.0 or higher should be used. Always choose the “Backup to Removable Disk” folder. Never use the “Backup to Disk folder” since Backup Exec may become confused when restoring data from removable drives.

• The information in this manual primarily documents Windows 2000, 2003, or XP systems with some coverage of Vista. Although the High-Rely may work with Windows NT, Linux, Mac OS X and other operating systems, our tech support can assist with Windows platforms only. Introduction ...... 1 Benefits of the High-Rely System ...... 2 Compatibility ...... 2 Convenience ...... 2 Speed ...... 2 Reliability ...... 3 Media ...... 3 Portability ...... 3 Cost ...... 3 Warranty ...... 3 A Word of Caution ...... 4 Connecting a High-Rely Unit to Your Computer ...... 5 Internal Units ...... 5 External Units ...... 5 An overview of Controllers (PCI , PCI-X , PCI-e, CardBus) ...... 6 HR1e3i-PCI Physical Installation & Cable connection ...... 8 HR1e3i-PCI Driver Installation for Windows XP, Windows 2000, or Windows 2003 ...... 9 HR1e3i-PCI Driver Installation for Windows NT 4.0 ...... 9 HR1e3i-PCI Driver Verification ...... 9 HR1e3i-PCI Specifications ...... 9 PCI-X SATA controller ...... 10 PCI-e SATA controller ...... 10 Cardbus Controller ...... 11 Inserting the Media ...... 11 Using the High-Rely Display and Interface ...... 13 Understanding the LCD Display ...... 13 Programming the Temperature Alarms ...... 14 Silencing an Alarm ...... 14 A Note About the “Optimize for Quick Removal” Option ...... 19 Assigning Drive Letters on Windows Systems ...... 19 Assigning Drive Letters with Microsoft’s Disk Management Program ...... 20 Disk Management Tips and Tricks ...... 23 Understanding the High-Rely Drive Manager ...... 24 Installation of the High-Rely Drive Manager ...... 24 Follow the on-screen instructions for installation of the High-Rely Drive Manager and consult the on-line in the HRDM2 administrator when needed...... 25 The Backup Process – An Overview ...... 25 How Hard Drives Work and Why They Fail ...... 26 Top 10 Common Backup Mistakes ...... 29 Backup Software ...... 30 Using Windows NTBackup ...... 30 A Note about NTBackup under XP Home Edition ...... 30 Backup Rotation Schemes ...... 33 XP Professional and Windows 2003 - shadow ...... 33 Scheduling the Job ...... 33 Backing up System State with NTBackup Two Stage ...... 35 NTbackup Review Checklist ...... 35 1. Reviewing Backup File Time and Date ...... 36 2. Reviewing Your NTBackup Size ...... 36 3. Reviewing the NTBackup Logs (Reports) ...... 38 4. Reviewing NTBackup Performance ...... 41 5. Checking The for NTBackup problems ...... 42 Application Log ...... 44 System Log ...... 45 Monitoring NTbackup ...... 46 Backing Up Microsoft Exchange with NTbackup ...... 47 An Alternative Exchange Mailbox backup Method ...... 47 Introduction Through the years, hard drives have become more reliable. However, hard drives can still wear out or break down for a variety of reasons. When this happens, it leaves you vulnerable to losing valuable business data. Perhaps even more important when considering reasons to backup are inadvertent data corruption and viruses. Traditionally some sort of tape has been used to backup computers due to its low cost and portability. Unfortunately, tape has proven to be extremely problematic, slow, and - in many cases - untrustworthy.

At Highly Reliable Systems we believe a good backup device should have some or all of the following features to accommodate a solid backup strategy:

• The Backup Media can be easily transported off site. • The Backup Media should be extremely cheap per Gigabyte of storage • The entire network backup should ideally fit onto one removable media so it can be done night unattended. • The Backup process should be fast. • Multiple media should be used so that a history of data can be maintained over a period of . • The backup drive itself should be reasonably priced. • The data should be available to restore immediately using “random access” to any file • The backup should have a long “shelf life”. • Backup media should be transportable and usable in a wide variety of systems. • The Backup media should be readily available.

Unfortunately, in today’s market, tape devices don’t give us all of the features on the list above. While inexpensive tape drives do exist, more reliable tape drives are expensive. We argue that “truly” reliable tape drives don’t exist at a reasonable price. This opinion is based upon many years of frustration in the field trying to make them work. Tapes are a “streaming” media, and unlike hard drives, which are “random access” require fast forwarding or rewinding to get to individual files. This process is time consuming and fraught with errors.

Have you ever been driving along and noticed black streamers of tape from a mutilated music cassette trapped in the weeds and billowing in the wind at the side of the road? Do you think the frustrated motorist who threw that tape out the window did so because it worked? Not likely. If you are frustrated with tape, we hope you will enjoy the High-Rely system. We believe that tape is antiquated, unreliable, and slow. We think you will be extremely pleased at the flexibility your new High-Rely media gives you when compared to tape. Although the cost per Gigabyte of storage for tape continues to be relatively low, we believe that the failure rate is such that even with slightly higher media costs the high- rely solution is much cheaper overall.

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 1 Benefits of the High-Rely System

By using standard SATA hard drives in single and multi-drive external enclosures and using our unique removable drive trays, this backup method makes all forms of tape backup obsolete! This system is faster, less expensive, and far more reliable than tape backup. It works with Windows 98, Windows 2000, Windows XP, Windows 2003, , and other modern operating systems.

Compatibility Due to the complexity of tape drives and the need for detailed logs to track backup results, most firms pay big dollars for third party tape backup software. Our multi-drive products show up as simple drive letters on your system and are trivial to use, so using the standard backup software and scheduler that come with your becomes much more practical. Or, if you prefer, you can still use third party software that supports removable drives such as Veritas Backup Exec 9.0, or Computer Associate’s Brightstor Arcserve. You can even use it with popular drive imaging software such as Acronis True Image, Symantec Ghost, or Drive Image! Available in both external, multi-bay and internal versions, there has never been a better time to buy your last tape.

Convenience Imagine not having to swap tapes out daily. Our multi-drive backup solutions allow you to direct different backup jobs to separate removable drives each day of the week. Then simply swap all the drives out one time at the end of the week and take whatever is needed off site for added disaster recovery protection. Get the functionality of a robotic “tape library” at a fraction of the cost and with more reliable and stable media!

Speed We’ve benchmarked the backup speed over eSATA and compared it to typical SCSI tape drives. eSATA allows the High-Rely drive to beat tape in almost every scenario. No rewinding or “drive hitching” back and forth - just fast, reliable smooth . Using MP3 files and standard from Microsoft, we have seen “real world” transfer speeds of 130Gigabytes per hour on fast machines backing up to a high-rely drive. Even faster results are possible using low level “sector based” copy software. Although we cannot guarantee a particular speed with your system and files due to the variables involved, we firmly believe you will see much faster backup results than if you used any of tape.

© Copyright 2006 Highly Reliable Systems Page 2 www.High-Rely.com Reliability Tape vendors are fond of quoting hundreds of thousands of operations before their tapes wear out. In the real world most of our customers report tapes last at most a year before unaccountable and frustrating errors start to occur. Using our technology, we guarantee your HR media will last for a minimum of 18 months. For a nominal warranty upgrade fee, we will provide a limited warranty for your drive and media for a full 3 years. Since our HR backup media is based on SATA hard drives, the stability and reliability is well established. Each HR drive tray has its own independent fan and temperature alarm to insure reliable operation. Any temperature problems result in immediate audible alarm.

Media Our drives support all standard SATA drive sizes including the newer 750 Gigabyte drives. You can buy the removable HR tray with our pre-formatted and tested SATA drives already installed. These drives have our unique 18 month replacement warranty. Or…. buy the trays separately and use your own drives. Tape vendors argue that tapes cost far less than hard drives. However, real world experience shows us tapes wear out about 10 times faster! Hard drive media cost slightly more initially but you will save money in the long run because the drives will last longer, have more repetitive uses, and save you many, many hours of waiting for rewinds, back-hitching, and frustrating failed restores.

Tape vendors frequently quote tape capacity with two numbers such as 12/24 or 40/80. This second number represents the size of compressed data that will fit on a tape. So a 40/80 tape is actually natively 40GB in capacity. The manufacturer “hopes” your data will compress 2 to 1! If you are using the NTFS or a third party backup software the same compression used for tapes can be used for HR media. Thus, our 7 drive model equipped with 750GB SATA drives, and when used with compression, could store an impressive 5.25/10.5 Terabytes of backup data!

Portability Traditional tape solutions can have portability problems due to head alignment and software issues making it difficult to tape data from one machine to another. Our drives are formatted to the operating system and can not only be moved from one machine to another by simply plugging into any compatible eSATA port, they can be moved without ever powering down either machine. In addition, SATA drives can be removed from their portable trays and installed on traditional SATA controller cables and used without reformatting or loss of data.

Cost You would expect all this would come at a higher price tag than tape. However, the HR solution is priced comparably to a single high end tape drive that use technologies such as DAT, DLT, and AIT. eSATA controllers are also very cost effective.

Warranty Our company name says it all. We design our systems for hard daily use. The High-Rely drives and media come with either 1 year or 18 month limited warranty (depending on your unit and whether it was purchased as a bundle or individually) that will repair or any component within 7 working days (typical). Your time is valuable! Since HR drives “just work” you won’t spend hours on the phone to our technical support reloading software, drivers, and running cleaning tapes. For added

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 3 coverage please purchase our extended 3 year warranty which includes overnight replacement protection.

A Word of Caution No backup system is perfect and we know of none that can be completely ignored. It is very important that you check your backup logs on a regular basis, and insure that your backups are restorable. While we firmly believe you will the High-Rely systems much more reliable than tape, we in no way can be responsible for lost or missing data or business losses associated with them. Please follow best practice recommendations by backing up often, insuring all critical files are included in the backup, transporting media off-site, and doing full test restores periodically.

© Copyright 2006 Highly Reliable Systems Page 4 www.High-Rely.com Connecting a High-Rely Unit to Your Computer

Internal Units If you are installing an internal unit, you will be cabling the drive either directly to your motherboard or to an internally installed eSATA controller card. In this case it may not be necessary to use a High-Rely controller since only one drive will be installed on each SATA port. Use a standard internal SATA cable to connect the High-Rely receiver to your motherboard or SATA controller. After connecting the data cable, simply connect any available standard molex power supply connector to the back of your High-Rely internal drive receiver to provide DC power. You may also wish to hook up the separate LED cable if your SATA controller or motherboard port has a “drive activity” header. Some SATA II hard drives are capable of getting the drive activity signal from the SATA cable itself, which means for later model hard drives the drive activity may work without the external LED cable. When it is working properly each High-Rely LCD should display a simulation of a rotating drive in the upper left corner and the blue back lit LED will flicker off when the hard drive is active.

Finally, mount the unit in your case as you would a standard or other 5.25” device. Some cases may require special “rails” or other mounting hardware that you will have to get from the case vendor.

External Units If you are using a slim line (single drive) external model you can use a standard eSATA to eSATA cable to connect the unit to any functional eSATA port. However, for any other model the eSATA controller must be multi-drive capable in order to see more than the first drive in the array. For practical purposes and maximum compatibility this means you must order and install a High-Rely controller. Refer to the appropriate section for installation of the High-Rely controller. Once the controller and associated driver has been properly installed you can plug your high-rely drive bay in using the included standard eSATA cable (Duplex cable for drive arrays larger than 5 bay). eSATA has the ability to be plugged in “hot” (while your computer is already powered up) so if your computer already has the latest controller and drivers you may be able to install the High-Rely external drive without even powering down your system!

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 5 Now plug the High-Rely system into a power outlet that is protected by either a surge protector or a battery backup System (UPS) and power the unit on by pushing and holding the power button in for a moment.

Depending on the version and service pack level of your operating system, Windows (versions 2000, 2003, XP) should automatically detect the High-Rely system. Linux and other operating systems that support the eSATA cards should also see the drive come on line automatically.

If your machine was already booted when you plugged the HR system in, you should wait until you see the following message in your system tray:

At this point, the system is online, and you can insert your HR media if you have not already done so. Skip to the “Inserting Media” Section.

An overview of Controllers (PCI , PCI-X , PCI-e, CardBus) Your High-Rely eSATA subsystem will require a compatible controller card to function correctly. All of our controller cards are based upon silicon image multi-drive capable chip sets. If you attempt to plug any of the multi-drive High-Rely units into a “standard” eSATA connector (such as those that are found on newer motherboards) you will only see the first hard drive in the array. You MUST use a multi-drive compatible controller for any of our multi-drive units. The Single drive eSATA product may be connected to any eSATA port.

Which controller you choose will depend upon your server’s “bus slots” (type of connector on the motherboard) and whether you want basic hard drive functionality (in which all the drives show up as individual drive letters) or more sophisticated capabilities found on RAID controllers (in which drives can be combined or “spanned” in various ways to form a single larger drive).

To oversimplify the controller/bus connector situation we could say that the PC bus has evolved from ISA to PCI to PCI-X to PCI-e (Also known as PCI-express) with each successive generation being faster than the last. Laptop adapters use the PCMCIA form factor, which is a thick credit card sized controller. The latest generation of laptop adapter is called CardBus.

Each bus type is available in a variety of “sizes” and speeds. For a detailed technical overview of some of these refer to the graphic on the following page.

© Copyright 2006 Highly Reliable Systems Page 6 www.High-Rely.com © Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 7 HR1e3i-PCI Physical Installation & Cable connection The High-Rely PCI controller can be installed in a standard height or thin form factor PCI slot by changing the metal bracket that comes with the card. The card will also work in a PCI-X slot (the card has a notch to allow it to fit in most PCI-X slots). You should use the single eSATA port on the card to connect any High-Rely external unit. If more than one eSATA port is required you can install the optional SATA to eSATA mounting bracket to bring one of the 3 internal ports out to eSATA ports. We recommend the HR1e3i-PCI card be used for 5 bay high-rely systems and below. The reason is that on 7 bay systems in which all 7 drives are written to simultaneously (as would be the case if separate jobs were writing to each drive) the controller may not be able to “keep up” when installed in faster machines such as 3.0 Ghz Pentium class systems. If you must use this controller for your 7 bay high-rely make sure to run verify after all back up jobs to insure the integrity of the backup.

Power off the system. Pick any available PCI slot. Connect any internal SATA hard drives to the host bus adapter and insert the host bus adapter into a PCI slot. After installing the card connect the external cable to any external High-Rely unit. Note the card has LED headers to provide “drive activity” signals for each of the 4 ports. In many installations these headers will go unused. We equip all external High- Rely units with “drive activity” functionality so the LED headers on the card are not needed. However, if you are using an internal high-rely SATA unit, you may want to use the enclosed LED cable to connect the appropriate LED pins (P1LED thru P4LED).

Drive Spining (Activity) Display & Blue Backlight LED Headers

Some SATA II hard drives are capable of getting the drive activity signal from the SATA cable itself, which means for later model hard drives the drive activity may work without the external LED cable.

© Copyright 2006 Highly Reliable Systems Page 8 www.High-Rely.com When it is working properly each High-Rely LCD should display a simulation of a rotating drive in the upper left corner and the blue back lit LED will flicker off when the hard drive is active.

HR1e3i-PCI Driver Installation for Windows XP, Windows 2000, or Windows 2003 After properly connecting the card and drives, power the system up. The Operating System should display the “Found New Hardware Wizard”. Click Next. Select “Search for a suitable driver for my device(Recommended)” Insert the High-Rely driver CD and check “specify a location”. Click next and specify E:\WinXP-2K-2K3 (Substitute “E:” with the appropriate drive letter for your CD or DVD drive). Click “open” and then “OK”.

When the wizard indicates that if found a driver for the device click “Next”. If the “Digital Signature Not Found” dialog appears, click “Yes” to continue installing the driver. The wizard will copy the required files to the system and start the driver. The wizard will display a completion dialog box. Click “Finish” to the wizard.

HR1e3i-PCI Driver Installation for Windows NT 4.0 After making the connections power the machine up. After the OS boots up, Click Start, settings, . Select SCSI adapters from the Control Panel. Select the Drivers tab and click “add”. Select “have disk”. Insert the driver CD and press “enter”. Chose E:\WindowsNT (substitute your CD- Rom drive letter for “E:”).

HR1e3i-PCI Driver Verification Right Click on “My Computer” and select “Properties”. Left click on the “Hardware” tab and then on “” button. Double Click on “SCSI and RAID controllers”. If there is no yellow “!” or “?” in front of Silicon Image SiI 3124 SATALink Controller then the driver started correctly.

HR1e3i-PCI Specifications The High-Rely PCI Bus controller is configured with 1 external SATA (eSATA) and 3 Internal SATA ports. This card includes brackets for regular or slim form factor machines (photo depicts the standard size metal bracket). We recommend it for 5 drive High-Rely systems and below due to speed limitations of the PCI bus. However, it will work fine for larger drive configurations (ie 7 bay units) on machines with CPUs below 2Ghz or in situations where no more than 5 drives will be written to simultaneously (As is the case with typical daily backups that write to only one hard drive at a time). Optionally, the Internal ports can be used with metal brackets (See photos) to drive additional eSATA devices outside the host system.

Based on a radical new chip architecture, the heart of the 1e3i card is the Silicon Image 3124 single chip controller. The controller is ideal for applications in both servers and workstations to support storage systems that require maximum performance. Each of the 4 onboard Serial ATA ports has a 2KB FIFO. Each port is independent and can run at either SATA I 1.5Gbps or SATA II 3.0Gbps data rates so either SATA I or SATA II hard drives can be connected. Having some SATA ports run at 1.5Gpbs and some at 3.0Gps is supported. All channels support SATA II “Native Command Queuing” (NCQ) with non-zero offsets as well as SATA I Tagged Command Queuing. This means that hard drives that support NCQ along with our 1e3i controller can buffer multiple read/write requests and then re-arrange them in the buffer to minimize drive seeking. This vastly improves performance in busy server

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 9 environments with multiple drive requests. The board also supports the latest unique SATA features such as spread spectrum clocking to reduce EMI.

But the true innovation with this controller is the multi-drive capability. If a multi-drive High-Rely is plugged into a “standard” eSATA controller or motherboard port, only the first hard drive in the array will be seen. However, this Multi-drive capable controller supports driving up to 5 hard drives from each SATA port. We do SATA II compliant FIS based switching, which is what allows us to support 5 drives per channel. The output voltage of the SATA ports is programmable, allowing the chipset on the card to drive to the new higher eSATA voltage standard, which in turn supports 2 Meter cable lengths that can be external to the host PC (2 Meters versus 1 Meter with regular unshielded internal SATA). The I/O signal Voltage of the SATA port drivers is 3.3Volts and the board’s core logic runs at 1.8V. The eSATA connector on the board is rated for a lifetime of 5000 plugs/unplugs and specifically supports hot plug on drives and cable.

The card supports devices such as CD and DVD SATA drives as well as hard drives. Drivers support Linux 32 bit, Linux 64 bit, Mac OS X, Windows 2000 & XP, Windows NT 4.0, Windows XP & 2003 64 bit. Please note that our tech support only covers Windows 2000, XP, and 2003 drivers at this time. We offer demo programs for those who wish to try the card in any other OS platform and want the security of knowing that if it doesn’t work it may be returned.

This card is also available in a softRAID version, which allows you to configure mirroring, stripe sets, RAID5 etc.

PCI-X SATA controller

For servers with PCI-X slots High-Rely makes a 4 channel eSATA card. The Windows drivers are exactly the same for the PCI-X card as they are for the PCI card.

Please refer to the section “HR1e3i-PCI Installation for Windows XP, Windows 2000, or Windows 2003 for detailed instruction on installing the driver for this card.

PCI-e SATA controller For machines with PCI-express slots, choose the High-Rely PCI-e controller. Windows drivers are available on the CD that shipped with your controller.

© Copyright 2006 Highly Reliable Systems Page 10 www.High-Rely.com Cardbus Controller For Laptops choose the Cardbus controller. Note that this controller supports only 1.5Gbps data rate, however this will not be a bottleneck on most systems since this rate is more than enough to keep up with standard SATA drives. Windows drivers are available on the CD that shipped with your controller.

Inserting the Media The following diagram identifies the front of the HR removable drive and gives the names of each item. To remove the media properly you will need to understand the function of the release levers and the key lock mechanism (items 5, 6, and 8).

1. LCD Display 2. Set Button 3. Up button 4. Down button 5. Lock cover lever (Small lever) 6. Release Lever (Large lever) 7. Front Bezel of HR Receiver Frame 8. Hidden Key Lock

The High-Rely backup system makes use of SATA hard drives. Many SATA II drives are specifically designed to support hot swap. The High-Rely trays make it possible to also hot swap (or warm swap) SATA I drives because before a drive is removed it is powered down safely by turning the key lock on the front of the unit. This technique allows even SATA I drives drives to be removed and installed while computer power is on (Hot swapped).

To insert the media, first make sure the lock is in the unlocked position (position C). Proper orientation of the removable drive is with the blue buttons to the left as shown in the photo. Notice that the entire large lever, called the “release lever” is in the fully open position. Do not attempt to insert the drive with the release lever closed.

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 11 Push the drive all the way in until you feel resistance. At this time move the small lever (the “lock cover” lever) to its midway (position E).

Move the larger “release lever” towards the closed position, using the lever action of the mechanism to pull the drive in the last few centimeters. Close the release lever until it snaps. If it will not snap shut check to ensure that you have the smaller lock cover lever in the partially closed position E.

Lock Cover lever position E is used to insure the larger “release lever” will snap shut

Now insert the key and turn it clockwise to the “A” position to power up the drive as shown in the photo. The B position of the lock is considered “off” and is not used in the High-Rely system.

At this point, if master power to the unit is on, you should see the LCD front panel of the drive light up and possibly hear the hard drive spin up. If you do not, the drive is not seated properly. Remove it and try re-seating it. Once you have successfully powered up the drive you should flip the lock cover to the fully closed or D position.

Once the drives spin up, Windows should recognize the new drive and will dynamically assign a drive letter to your new media. Please read the “Assigning Drive Letters on Windows” section for more information about changing the assigned drive letters.

In the final step the “Lock Cover” should be moved to position D

© Copyright 2006 Highly Reliable Systems Page 12 www.High-Rely.com Using the High-Rely Display and Interface

Understanding the LCD Display

1. Hard Drive activity symbol (simulates spinning disk when drive is in use) 2. Master/Slave Status display (Unused feature of the LCD display. Always displays as slave) 3. Alert Symbol (Symbol is on when the unit is in alarm status) 4. Fan Status Display (Simulates a rotating fan to show that drive fan is spinning) 5. Thermometer Symbol (On when numeric display is showing temperature) 6. Digit display (Displays temperature normally) 7. Down arrow (positioned above down button) 8. Hour Indicator (On when numeric display is showing days/hours of operation) 9. Degrees Symbol (On when numeric display is showing temperature) 10. Decimal Point 11. Up arrow (positioned above up button) 12. Day Indicator (On when numeric display is showing days/hours of operation) 13. SET indicator (positioned above SET button) 14. Hard Drive Usage Time Symbol (On when display is showing days/hours of operation)

Normal Display The normal LCD display will show the current drive temperature digits (6) in either Celsius or Fahrenheit. In addition, you should see the “slave” symbol (2), which is always on, the fan symbol simulating a spinning fan(4), the thermometer symbol (5), as well as the up and down arrow and SET symbols (7,11,13).

Hard Drive in Use When the hard drive is being written to or read from the hard drive symbol (1) will simulate a spinning disk. The rest of the display will be normal as discussed directly above. Notice also that when hard drive is in use the Blue black lit LED will flicker, giving a quick visual indication of drive activity.

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 13 Hard Drive Usage Display When you change the mode of the LCD to display hard drive usage time instead of the temperature display using the SET button, the digit display (6) will show the number of days and hours the drive has been in use.

Fan Malfunction Display If the fan is disconnected or stops turning the thermometer symbol (5) will blink, the “alert” symbol (3) will come on, and an audible alarm will sound.

Temperature Alert Display If the temperature exceeds the factory setting of 130 degrees F, the screen will show the alert symbol (3). In addition, the thermometer symbol (5) will blink and an audible alarm will sound.

Programming the Temperature Alarms From the “Normal” display you can press SET to change the temperature display from Fahrenheit to Celsius. Use the up or down arrow buttons to make this change. Press the SET key again to confirm your and advance to the Temperature alarm threshold screen.

In the temperature alarm threshold screen, the threshold temperature blinks. Use the up or down arrow buttons to change the threshold. Once you’ve set the desired temperature, hold down the SET key for at least 3 seconds to make the change permanent. You should hear two beeps to indicate the setup is complete and the LCD display will return to “Normal”.

If at any time during the SET process you do not depress any buttons for 15 seconds, the unit will exit setup mode and return to the normal display. All settings made up to that point will be cancelled if this happens.

Silencing an Alarm If you hear a continuous alarm from your HR device, it means one of the following: One or more drive fans have stopped turning The temperature has exceeded the alarm threshold. The High-Rely alarm circuitry has malfunctioned.

Hit any blue button to silence the alarm. Then determine what caused the error condition and correct it.. Replacement fans and drive trays are available from Highly-Reliable Systems.

Turning Off the Auto-Play feature in Windows

The Auto-play feature in MS Windows can be very annoying or disrupting to backup functions when using removable drive media like that in a High-Rely system. This document explains how to configure the Auto-Play feature in Windows so that you can disable it entirely or selectively.

© Copyright 2006 Highly Reliable Systems Page 14 www.High-Rely.com

The message below can be a real nuisance every time you change your backup media.

We recommend that for each backup drive AND media type that you turn off .

Permanently Turning off AutoPlay

To avoid these dialogs permanently, you can try one of three different techniques

Technique #1: Use the following steps:

1. Open the My Computer icon.

2. Under Devices with Removable Storage, right-click the drive letter for the drive that you are using, and select Properties.

3. On the Autoplay tab, select the Mixed Content type.

4. Choose “Select an Action to Perform” button.

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 15 5. Select Take No Action. Do this again for music, picture, and video files.

6. Select Apply after all settings are made and then OK. Repeat on the remaining drives. Please note that this procedure might not work in all cases. This issue is caused by a file type association that is set by the Windows XP operating system.

Technique #2: The above instructions obviously require a lot of work. We have been told that Microsoft’s “tweakui” for XP has an option to easily turn off autoplay for removable drives. Use TweakUI to navigate to my computer>autoplay>types. TweakUI is part of PowerToys for Windows XP. As of this writing a download link can be found here: http://www.microsoft.com/windowsxp/downloads/powertoys/xppowertoys.mspx

Technique #3: If you don’t want to load TweakUI, another possibility for turning off the autoplay feature is to use the registry editor. Run either of the Registry Editors (REGEDIT.EXE or Regedt32.exe). One of the relevant entries you can change is:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer To turn off the feature set the variable NoDriveTypeAutoRun to a Data Value of: dword:0x000000FF This disables the Autoplay feature on all drives of the type specified.

You may want some more Information on this Registry setting so here it is. The FF value we recommended above is actually a bitmapped value. The way it works is that to disable Autoplay on a particular type of drive, you set the bit representing that drive type to 1. To disable more than one type of drive, set the bits representing each type to 1, or sum the hexadecimal values of the representative bits.

© Copyright 2006 Highly Reliable Systems Page 16 www.High-Rely.com Value Disables Autoplay On 0x1 Drives of unknown type. 0x4 Removable Drives. *0x8 Fixed (just hard drives) Drives. 0x10 Network drives. 0x20 CD-ROM drives. 0x40 RAM disks. 0x80 Drives of unknown type. **0xFF Drives of all types.

** Most recommended setting,

*Recommended setting.

By default, Autoplay is disabled on removable drives, such as the drive (but not the CD- ROM drive), and on network drives. The default value 0x95 (149) is the sum of 0x1, 0x81 (unknown types), 0x4 (floppy drives), and 0x10 (network drives).

Note: Autoplay is triggered by a Media Change Notification (MCN) message from a monitoring service or from the CD-ROM driver. If the Windows interface does not receive this message, Autoplay does not operate, regardless of the value of this entry. Entries that suppress the MCN message, such as Autorun and AutoRunAlwaysDisable also disable Autoplay. Autoplay is also disabled on any drive if it is disabled by the value of NoDriveAutoRun (in HKLM or HKCU) or NoDriveTypeAutoRun (in HKLM or HKCU). However, if NoDriveAutoRun or NoDriveTypeAutoRun appear in HKEY_LOCAL_MACHINE, their corresponding entries in HKEY_CURRENT_USER are ignored.

Related Registry entries Entries: Autorun, AutoRunAlwaysDisable, NoDriveAutoRun (in HKLM), NoDriveAutoRun (in HKCU), NoDriveTypeAutoRun (in HKCU)

Note: With this solution, Windows will no longer be notified when you insert a new CD or DVD. To make sure the correct icon and for the current DVD are displayed in My Computer and Explorer, press F5 to refresh the window.

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 17 Technique # 4: Highly-Reliable System's HRDM2 drive letter management software which controls what drive letters get assigned to removable media and allows duplicity of those assignments will allow you to turn off auto-play through selection during its installation. The HRDM2 utility programs comes on the HR Resources Disk which ships with all HR products. Safely Removing the Media To pull a drive out you will follow the steps outlined for inserting the drive in reverse but with one additional step. That step (step one) is to verify the PC operating system is not currently writing to the drive The second part of the operation is to turn the key to “power down” the SATA hard drive. Finally you will remove the drive.

Microsoft calls a hard drive removal without notification a “surprise removal” and has documentation about these removals on their web site. Always insure that no remote users or unknown software service is writing to the drive prior to removing it. Removing a drive in the middle of a write can damage the of the drive, and possibly lead to data loss.

If you want to insure that the drive is not currently in use, you may wish to download and install a small program called wholockme. At the time of this writing you can find this at http://www.dr-hoiby.com/WhoLockMe/ You may also find this on our website http://www.high- rely.com along with some other useful utilities and information. Once installed you can simply right click on a drive letter in explorer (or My computer) and select “wholockme”. If the drive is in use the program will report the name of the program that has locked the drives or files. If a program erroneously has the drive locked (Windows Explorer seems to be a common culprit) you might consider issuing a mountvol d: /D command to remove the drive letter prior to removing the drive. Unfortunately, this technique requires that you remount the drive with a mountvol command that specifies the full volume ID of the drive, which is inconvenient, so this should only be done as a last resort.

Once you are sure the drive is not in use, flip open the lock cover lever, Insert the key into the High Rely drive and turn counter-clockwise to power down and unlock the drive from the bay. You may now remove the drive from the bay safely by pulling open the release lever and pulling the drive straight out. Please refer to the drive removal section more specific instructions.

© Copyright 2006 Highly Reliable Systems Page 18 www.High-Rely.com A Note About the “Optimize for Quick Removal” Option On the newer operating systems such as Windows XP and Windows 2003, there is an option to allow “quick removal” of hard drives. We believe “best practice” is to make sure all High-Rely drives iare set for quick removal and recommend that you check the setting. To do so, right-click on My Computer, and select "Manage". Click on "Disk Management" in the left-hand column. Now Right click in the grey area where the “disk #” associated with your High- Rely displays. (See red circle in screen shot) and select “Properties”.

From this screen you will be able to select the “Policies” Tab. Note the radio button that allows you to indicate the drive should be “Optimize for Quick Removal”. The comment indicates that the setting disables write caching on the disk and in windows.

Write caching a removable storage device is not recommended. Removing a disk without properly notifying the system can lead to data corruption. Data can still be buffered and not yet transferred to the disk when a disk is physically removed. Proper ejecting the disk through the system and system will allow the Windows disk administrator to transfer any unwritten data from the buffers and insure no files are open on the devices. If at any time you get a write cache failure that results in your data “disappearing from your HR drive please do not panic – Under certain conditions we have seen windows explorer erroneously show “empty” hard drives that actually had data. Upon reboot the data reappears.

Assigning Drive Letters on Windows Systems

By default, when you power on each HR media, it searches for the first free drive letter it can find. In a multi-drive high-rely system, it is possible that Windows will provide a different drive letter each time you power a given drive up, depending on what is free right then. One bay HR systems should not have this issue (unless you wish to force the one bay to use a higher drive letter than is assigned by default).

The order you turn the drives on determines which HR Media get what letters. This can cause problems, because backup jobs are typically set to write to a particular drive letter. (i.e. the Monday job writes to drive K:, the Tuesday job writes to drive L:, etc.). Additionally, there can be conflicts if you have mapped network drives already assigned to letters that the high-rely system thinks are free.

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 19 To handle the issue you can: 1. Allow Windows to assign static drive letters to each drive but make sure to power each drive up in the same order each time. 2. Load and use the High-Rely Drive Manager software to re-map drive letters to your preferences. This software sits in the system tray and will detect drive changes and dynamically remap the letters assigned by windows based upon volume serial number. This way the drive letter will always be used by that media cartridge, so you won't have these problems. Please refer to the section below on HR Drive Manager for more information.

Alternatively If you prefer to use Microsoft’s “Disk Management” to change your drive letters, refer to the instructions below. However, you should be aware that if you change a drive letter on Media “A” to a letter (such as “N:”), pull the drive, put in media “B” and also that drive “N:” you will find that when you put the original media A back in the drive that it no longer retains the N: designation. This is a Windows problem that exists in all versions we have tried. This problem is worked around by the High-Rely Disk Management software.

NOTE!!! On some systems, the auto mount feature is disabled which will result in drives not appearing after they’ve been inserted.. To enable it, issue a “mountvol /E” from the command prompt.

Assigning Drive Letters with Microsoft’s Disk Management Program

Before assigning new drive letters, you may want to record the “default” drive letters that Windows assigned each of your drives so that you can easily identify each drive. On single bay systems this is relatively simple – just note the drive letter as the unit comes on-line (Use the key to power it off if necessary). However, on multi-bay systems we recommend that you carefully power up one drive at a time using the key and record each drive letter and its associated drive bay position on the multi-bay unit.

Once you’ve recorded the existing drive letters use Microsoft’s disk management program to change them.

© Copyright 2006 Highly Reliable Systems Page 20 www.High-Rely.com Right-click on My Computer, and select "Manage".

Click on "Disk Management" in the left-hand column. We will be Right clicking on the various drives and changing properties

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 21 Notice in the above screen shot how the drive with volume label "Monday", has been dynamically assigned the drive letter F:. Let's say we want to change it to J:

Right-click on the volume "Monday", and select "Change Drive Letter and Paths", as shown below:

Choose "Change", and select the drive letter you want, then click ok, as shown in the next figure:

Repeat this procedure for every high rely media you have. Make sure all "Monday" media is assigned to one drive letter, all "Tuesday" to another, etc

© Copyright 2006 Highly Reliable Systems Page 22 www.High-Rely.com Disk Management Tips and Tricks You may want to consider turning off indexing for your High-Rely drives. We recommend this so that the operating system doesn’t lock your drive without your knowledge, complicating the safe removal process. From disk Manager Right click on the primary partition manager portion of a given drive (right hand side that is usually white with blue band) and select properties. Uncheck the box on the general tab at the bottom that says “Allow to index this disk for faster file searching”. See the graphic below.

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 23 Understanding the High-Rely Drive Manager HR Drive Manager is a utility that runs under Windows 2000, 2003, Windows XP and Windows Vista that solves some specific problems relating to drive letters in Windows operating systems. The software is not required to make the High-Rely drives work properly and you may safely use the High-Rely system without HR drive manager.

So what does HR Drive Manager do? Under normal conditions, when you plug any hard drive into any Windows system, the Windows OS will assign the next available drive letter to the device. For example, suppose you had a machine with one hard drive and one CD-Rom drive. These would typically be labeled C: and D: respectively. In this example, when you plug the removable drive in, it would be assigned the drive letter “E:” In some cases, you may find that there is a conflict with the Windows default drive letter assignment. This is particularly true when you have a multi-bay High-Rely device that uses a lot of drive letters. For example a 7 bay high-rely might use E:, F:, G:, H:, I:, J:, K:. It’s easy to see that one or more of these drive letters might conflict with existing drives or network mappings. For this reason, many choose to “re-assign” the drive letters using Microsoft’s disk management software as described in the preceding section. However, there is a bit of a problem with the way removable drive letters are handled by Windows. Suppose that in the above example we reassigned the 7 drive letters to the “high end” of the available drive letters (T,U,V,W,X,Y,Z). Windows will only retain these letter assignments until new media is inserted. So suppose you remove the 7 old drives (Set 1) and install 7 new drives. Windows will assign the new volumes E through K. Naturally, you will want to assign these 7 new drives (set 2) the same letter scheme as before (T-Z) so that the backup software will continue to use the appropriate drive letters and automatic backups will work properly. You can easily do this (again) with the Disk Management utility in Windows.

A problem may occur in “week 3” when you re-insert the original 7 drives (set 1). You may be surprised to find that Windows will label these drives E-K NOT T-Z. The reason for this is that Windows retains “memory” in the registry of only one volume associated with each drive letter for disks formatted as “Basic”. We have provided the HR Drive Manager software to deal with this issue. What the software does is automatically detect any High-Rely drive changes and map each physical hard drive to the appropriate letter based on a simple configuration (.INI) file. This text file retains data for ALL volumes installed in the High-Rely system indefinitely and always assigns the same drive letter each time that volume is installed.

Installation of the High-Rely Drive Manager To install the software, you can launch it from the link on the page of your High-Rely CD or double click the hrdm_install.msi in the \High-Rely Drive Manager folder.

© Copyright 2006 Highly Reliable Systems Page 24 www.High-Rely.com Follow the on-screen instructions for installation of the High-Rely Drive Manager and consult the on-line help in the HRDM2 administrator when needed. The Backup Process – An Overview It is often said that one of the best ways for an administrator to loose his job is by failing to have critical data backed up when there is a hard drive failure. “Backing up” is the term we use when we make a copy of data stored on our hard drive. We usually copy our data to some sort of tape drive but the backup can be to other media as long as it meets the criteria for cost and reliability.

Hard drives are one of the few components in the computer with moving parts and tend to be subject to more failures than other parts of the system. Worse, almost any other failed component can be swapped out in a matter of minutes. When your hard drive fails, the data on that drive is lost and the time to repair is considerably longer. Making an extra copy every once in a while is an important precaution.

Backups can be a time-consuming and boring, and are a never-ending part of administering a network. It is rare that we spend so much time doing something we hope we’ll never have to use. Many administrators feel like the time they spend backing up is a wasted. Please don’t fall into that trap! While it may seem pointless to backup the same data over and over for years on end, you’ll be very glad you did when you finally experience a failure.

Many people assume that if they copy just their “critical data” onto a diskette, CD, or other removable media they are OK. However, you should consider the length of time to get your operation back up and running. It’s not uncommon to have it take several days by the time the drive is replaced, the operating system is re-loaded, and the software is re-installed. That’s why computer experts prefer to create a “full” backup of the entire system, including the Operating System. Think of this as like taking a snapshot of the data on your drive. The goal is to have a bootable image that can be restored to a new drive in a matter of a few hours or less.

In large firms, down time is measured in terms of thousands of dollars per minute or more. Ask yourself how long you can afford to be without your network and adjust the frequency and attention you pay to your backups accordingly. Obviously, smaller firms have a little more breathing room than administrators of “mission critical” computers in Fortune 500 companies have, but even small companies will want to have a disaster recovery plan that describes how to restore as quickly as possible. One of the single most important parts of your network “disaster recovery plan” will be your backup and restore strategy.

Studies have shown that human error—primarily accidental file deletion or modification—causes over one-third of all data loss. For the average business, whether a small, medium, or enterprise organization, the impact of lost data is at the least an inconvenience and at the worst a critical blow that can jeopardize daily operations. The High-Rely system is superior to anything on the market for rapid restores on anything from a single file to an entire drive.

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 25 How Hard Drives Work and Why They Fail Many people have never seen an actual “hard drive”. In fact, one of the mistakes we have seen people make is to point to their computer (the CPU unit) and say something like “My Hard drive is acting up”. Actually, as figures 1-1 and 1-2 show, the hard drive is a little silver or black box somewhere inside the computer. It would be more correct to say “My CPU unit is acting up”

Figure 1-1 The Hard drive is located inside the CPU Unit

Figure 1-2 shows a hard drive with the top on and the same drive with the top removed (right). Hard drive manufacturers are fond of showing this removed top view, but it’s important to understand that the drive with the cover off has been ruined. Hard drives are hermetically sealed to keep out dust and dirt. One of the reasons is that hard drives fail is that the magnetic “heads”, which are supposed to fly very close to the surface of the drive, make contact too many times (or too hard) against the rotating platters, damaging the coating on the disk surface.

Figure 1-2 Inside the hard drive

Hard drives were originally invented back in the 1950’s. Surprisingly, they haven’t changed much since then in terms of their basic operation. The surface of the each rotating platter is coated with a material

© Copyright 2006 Highly Reliable Systems Page 26 www.High-Rely.com that can easily be magnetized. At the end of a small suspension arm, the drive manufacturer places a small electro-magnet. As the disk rotates, electricity can be passed through the head, effectively magnetizing a small spot on the disk. Like all magnets, these spots can be laid down in either a North/South or South/North orientation. As we lay down these spots, the path of the rotating disk under the head carves out “tracks” of data. These magnetic spots represent the binary zeros and ones that record all data inside the computer. The same head that writes the data can be used to read the data back because the magnetic spots induce a small electrical current in the heads.

Figure 1-3 Rotating Platters Inside a Hard Drive

The Importance of Retaining Multiple Backups Many people new to backup try to save money by limiting the number of backup media and reusing them on a regular basis. However this strategy can be “penny wise and pound foolish”. It’s important to realize that if backups are worth the effort it’s also worth a small amount of additional effort and money to insure the backups are really good.

A scenario we’ve seen played out over and over again is variations on the following story: A corruption in the accounting database is first noticed in the Accounts Receivable module on Wednesday afternoon. The bookkeeper is doing what she normally does when the system gives her an error on the screen. But it’s late, the bookkeeper is tired and frustrated, so she shuts the machine down and goes home. Thursday is another day and the bookkeeper stays busy working on other tasks. By the time she gets back to the

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 27 computer on Friday morning, she’s forgotten all about that error. It turns out she works on Payroll Fridays and the AR system doesn’t get touched until Monday. But Monday morning she gets the same error she saw last Wednesday and now she’s in a panic. She’s got an entire year’s worth of data in this darn computer. Worse, she realizes something no one else in the office knows. She was put in charge of backups and has been using the same tape each night. After all, the tapes are expensive and she’s always been diligent about saving the boss money. What all of this means is that the “bad” data has now been backed up over the last known good data several times. Not what we wanted!

It’s an unfortunate fact that in most small networks, backing up data is given little attention. Another scenario we see is that a technician installs some sort of backup device, sets up a nightly backup schedule, gives someone in the office a quick overview on how to change tapes, and then leaves. Usually on the way out the door the tech reassures you that the backup will happen automatically. But there’s more to a good backup than that! Inevitably what happens is that somewhere along the line the automatic backup stops working. Maybe the person trained to change the media quits. Maybe the media become dirty or the tape gets worn from repeated use. Perhaps some newly installed software conflicts with the tape backup schedule or the tape drive fails or someone in the office leaves their software running and the tape software dutifully “skips” the open files.

Whatever the reason, a lot of things can (and do) go wrong with backups! It’s not enough to blindly shove the media in every day, trusting to fate that the software is working. You’ll want to make sure to do it right and to view the backup logs after every session. We’ll discuss those all important backup logs in more detail in an upcoming section.

It is critical to understand that automated backup must always be monitored to insure backups are working. It is very common for scheduled services to stop working for a variety of reasons. In addition, if users accidentally leave machines on at night the backup program will “skip” open files, resulting in the backup being useless for those particular files. Often these are the most important files in the mix.

© Copyright 2006 Highly Reliable Systems Page 28 www.High-Rely.com Top 10 Common Backup Mistakes 1. Tape Logs are not checked a. It is critical to review the “log” files available in most backup software to see if files were skipped or other errors occurred. 2. Backup media not changed out each day. a. Backups fail due to incorrect media or because previous job ejected tape. 3. User’s leave workstation logged in and critical software up on the screen at night a. Most tape software will skip open files, which are often the most critical files in the enterprise. 4. Tape errors a. Tapes have limited life and shouldn’t be used too often (50 or more uses generates errors on many tape sub systems) b. Tape needs cleaning (dusty environments such as mines, construction sites, shops etc eat tapes quickly) c. Tape Drive failures. Tape drives have a higher failure rate than most computer peripherals. 5. Customer doesn’t own the proper tape backup software that handles complex “always on” applications such as Exchange or SQL™. a. For example, although the Native backup program that comes with windows 2000, 2003 or XP will backup exchange, but will not allow restoring individual mailboxes. Restore is an “all or nothing” proposition. 6. Relying on Incremental backups with unreliable tape media. 7. Customer believes that backing up just their data is enough a. Truth is the time spent reconfiguring the operating system and reinstalling applications is often very costly. 8. Media not transported offsite on a regular basis. a. Fire, flood, theft, employee malice etc can result in loss of critical data at the work site. It’s important to delegate someone to periodically remove a backup media (and bring back offsite media as needed.) 9. Failure to have sufficient media for a good history. 10.Failure to consider the need to archive a. In today’s litigious environment, consider carefully whether you should retain emails or other important documents over a long period of time. This generally means “retiring” backup media permanently in an archive.

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 29 Backup Software Your High-Rely backup system can work with a variety of backup software programs.

Many tape drives vendors recommend or require special third party software to be totally effective. Although your High-Rely drives can be used with many of these same backup programs, we believe that the NTBackup program that came with your Windows 2000, 2003, or XP operating system will work just as well in a variety of circumstances. You may find that using the native NTbackup program (which has traditionally been avoided by IT professionals) is more practical with a High-Rely subsystem than it was with tape. The reason for this is that the additional functionality of third party software is often rendered unnecessary by the speed, reliability, random access capability, and ease of use of the HR media.

Although we cannot support third party programs, we have provided some limited documentation on how to use the NTBackup program that ships with most versions of Windows. We have chosen to provide some documentation on this program because it provides functionality such as backup of Exchange and of Active in Windows 2000 and Windows 2003 server environments

If you require advanced features such as sophisticated logging, backup of open databases or files, one step disaster recovery capability, etc you should definitely consider purchasing one of the many third party backup software solutions.

Using Windows NTBackup Your windows operating system comes with a built in backup program that can provide basic backup functionality with your HR media. This program is a “lite” version of an early generation product called backup exec currently being sold by Veritas. The program is essentially the same under the various versions of Windows including Windows 2000 (Professional and Server), Windows XP Professional , and Windows 2003. If you have XP Home edition please refer to the following section.

A Note about NTBackup under XP Home Edition XP Home editions don’t install the program by default but you can find it under \VALUEADD\MSFT\NTBACKUP. There are some problems with the use of the backup utility with the XP Home edition. Apparently the NT utility's restore function does not work reliably with Home Edition's Simple File Sharing. Microsoft did not develop the backup utility (it is licensed from Veritas) and possibly did not want to invest resources in solving any compatibility issues before releasing XP Home. There is a very good discussion of the problem here: http://www.annoyances.org/exec/forum/winxp/n1040670211

We will refer to the built-in backup program in the various versions of Windows as “NTBACKUP”. It can be found under Start, Programs, Accessories, System Tools Backup.

© Copyright 2006 Highly Reliable Systems Page 30 www.High-Rely.com The NT backup program makes use of the Windows Schedule service to schedule periodic backup jobs. The backup wizard in the NTbackup software allows you to easily create backup jobs by walking you through the selection process. Alternatively, you can make backup selections and schedule your jobs manually. The following screens show Windows 2000 but the program is similar under XP and 2003.

If you select the backup wizard the program will assist you in choosing what you want to backup. We recommend backing up everything including system state for most networks.

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 31 The Backup Selections can include both local and remote hard drives. However, keep in mind that a limitation of the built-in Windows backup program is that “system state” can only be backed up on the machine that physically has the backup device installed. System state includes critical operating system files required to restore your machine to a booting state in the exact same form it was prior to any outage. This limitation can be worked around by scheduling a “2 stage” backup (discussed later).

© Copyright 2006 Highly Reliable Systems Page 32 www.High-Rely.com Notice that the backup destination will be a file (No other choices are allowed unless you have an alternate backup device in your machine such as tape). You specify the path and under the “backup media or file name” dialog box. Make sure to choose the drive letter associated with your High-Rely drive.

Often, you will overwrite this file each time you do a backup. Many clients choose to backup nightly to the same filename and then change the media that each backup goes to each day. This can be done by either swapping drives daily or, if you own a multi-bay High-Rely device by specifying different drive letters for different nights of the week.

You may want to consider whether your high-rely media will accommodate more than one backup. For example, if you have only 10GB of data to backup and your high-rely media is 80GB, you may want to create 3 to 5 individual backup jobs, each with their own filename and/or path. Each job would create a separate file on the drive, preventing the overwrite condition that would normally occur. The advantage of this is that you can store multiple backups onto the same media, providing a deeper history. Just be careful that the drive doesn’t get completely full with the number of backups you choose. Over time, your data set will likely grow and you want to provide headroom for that so backups won’t fail due to lack of drive space.

Backup Rotation Schemes

XP Professional and Windows 2003 - Volume Windows XP allows you to create shadow copy backups of volumes, exact point-in-time copies of files, including all open files. For example, databases that are held open exclusively and files that are open due to operator or system activity are backed up during a volume shadow copy backup. In this way, files that have changed during the backup window are copied correctly.

Shadow copy backups ensure that: Applications can continue to write data to the volume during a backup. Files that are open are no longer omitted during a backup. Backups can be performed at any time, without locking out users.

Scheduling the Job Once you’ve selected the files you want to backup, you will want to set the options & backup schedule. The wizard will walk you through the schedule portion of the job. The simple configuration is to create a “weekly” job and then select the days of the week and time you want to run.

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 33 You should insure when you schedule a job that you run it in the “security context” of the administrator or another user that has sufficient rights to access all files. It is also important that this user does NOT have a blank password, as the scheduled task may not run.

The presence of an Icon on each day you want a scheduled backup to occur as shown below is an indicator that the job is scheduled.

© Copyright 2006 Highly Reliable Systems Page 34 www.High-Rely.com Backing up System State with NTBackup Two Stage Backups If you would like to backup multiple computers to a single High-Rely device over the network using NTbackup, you should do a “two stage backup”. Although you can backup all data files across a network, NTbackup has a limitation that prevents certain files from transferring. This limitation is to encourage purchase of third party software that has more functionality. However, you can use the 2 stage backup as a workaround. This workaround also allows you to capture system state with NTBackup locally and then invoke NTBackup “over the wire” For the second stage backup.

Suppose Server1 has the High-Rely drive and Server2 does not. The procedure generally involves using NTbackup on server2 to backup system state and any other information (such as Microsoft Exchange mailbox data), that can’t easily be backed up over the network sometime before the High-rely backup occurs. For example, you might tell Server2 to backup system state to a folder called “Server2_systemstate” at 7 pm each night. This backup by itself is not very useful because you will send the file to the same hard drive you are backing up. Thus, if you stopped here and had a hard drive failure on Server2 you would be unable to .

However, if you schedule NTbackup to backup both Server1 and Server2 at 9pm to the High-Rely device you effectively work around the limitation of the built in backup program by backing up the system state that was captured to the local drive on server2 at 7PM. NTbackup Review Checklist It is extremely important that backups be verified on a regular basis. Too many offices have diligently swapped backup media out day by day only to discover their backups were not restorable when a disaster finally struck. The following checklists detail some recommended “best practices” to insure your backups are good. In the following sections, we will describe in detail how to accomplish each of the following tasks.

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 35 • Verify the time and date of the backup file on the HR media matches the scheduled date.

• Verify the size of the backup is consistent with the size of the original data (compression may make values different)

• Review the backup report (log) for skipped files or other problems

• Note the backup speed and verify it is roughly the same as previous backups.

• Check the windows event viewer for errors that may have occurred during the backup process.

1. Reviewing Backup File Time and Date It is helpful to use explorer to confirm the date and time on your backup file on the HR media is what you would expect based on your schedule. If you are using the native Windows XP/2000/2003 backup, you can expect to see a single large file on your High-Rely drive. In the graphic below, we used “My computer” to open up the Y: drive and view the drive contents. Note the date and time on the “backup.bkf” file tells me when the job finished. You should make sure this time is consistent with when you scheduled your last backup job. You may also want to take note of the overall size (about 20GB in this example) so you can compare it to the size of the data (See step 2 of the backup verification in the next section).

2. Reviewing Your NTBackup Size The second thing you should do to verify your backup is to compare the amount of data the backup program reports (or the size of the backup file when you view it in explorer as in step 1 above) to the size of the data as reported by Windows. Suppose you wanted to know how much data was on the C: drive of your machine. Windows explorer (or “My computer”) will give you this information by right clicking on the drive and selecting properties as shown below:

© Copyright 2006 Highly Reliable Systems Page 36 www.High-Rely.com We can see that the above machine has approximately 21.4GB of data stored on the local C: drive.

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 37 In some cases your backup may encompass less than an entire drive. The same technique can be used to review total size of a given folder on the drive. For example, if you wanted to know how large your “Documents and Settings” folder was in preparation for a backup you could right click just that folder using windows explorer and select it’s properties as shown below to reveal that folder has approximately 962MB of data in it. This number should be compared against the size reported by the backup program after it completes. Although they may not be exact, the values should be fairly close to give you a comfort level that all your data is being backed up properly.

3. Reviewing the NTBackup Logs (Reports) In addition to verifying that the size of your data roughly matches the size of your backup, it is critical that you review the results of your backup each day to insure the job ran and that files are not being skipped . The Windows NTBackup program creates what are called Logs or Reports to assist you in this review.

© Copyright 2006 Highly Reliable Systems Page 38 www.High-Rely.com Backup Logs can be reviewed by selecting Tools, and Report from the NTbackup menu as shown below.

A list of reports by date and time will display for you to view or

NTBackup uses Notepad to display the log. Depending on how much detail you selected for your backup, the log (under Tools, Options) may display all files backed up or only errors or exceptions such as files that were skipped. Normally, it is sufficient to set logging to “Summary” so that is easier to find only problem areas.

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 39 It is not uncommon to see files skipped on a server, although it is important to determine if the files are critical or not. Some OS files such as those associated with DHCP or WINS services as shown below will always be open and skipping them is not crucial to restoring your server. However, it may be a good idea to deliberately exclude them from the backup to make the logs easier to view and verify at a glance.

© Copyright 2006 Highly Reliable Systems Page 40 www.High-Rely.com Other files, such as database or user files may be skipped because a user failed to log out of their machine and such errors should be discussed with users to avoid them. IT IS IMPORTANT to understand that files skipped will NOT be restorable and represent a substantial threat to a viable backup.

Entries such as those shown below may indicate a user failed to log out of the database and represent potential serious backup failures.

4. Reviewing NTBackup Performance

You can get the total number of bytes backed up and the length of time it took from either the final job completion window (if doing a manual backup) or from the “report” or backup log.

It is not a bad idea to keep track of the number of Megabytes per minute being backed up so that if the value changes you are tipped off to potential problems. Although the backup speed will vary somewhat depending upon the nature of the data, speed of the hardware, load on the machine/network during the backup, and other factors you should be able to “baseline” your backup speed and check it to insure it stays approximately the same each time.

In the screen shot above approximately 20 GB of data were backed up in approximately 35.5 Minutes. This translates to a backup speed of 559.59 MB/Min. You may do this calculation directly from the numbers shown above (20,783,367,105 bytes/35.42 minutes = 586769257.62 Bytes/Minute). Divide by 1024 twice to Bytes per minute to Megabytes per minute and you get 559.59 MB/Min. Multiply by 60 to get 33.6GB/Hr. We recommend you always convert to either Megabytes per minute or

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 41 Gigabytes per hour for comparison purposes. You may want to consider logging this number so you can reference later if your backup changes speed.

The above number was taken from a Pentium IV 2.8Ghz Running Windows XP NTBACKUP and backing up a local 7200RPM IDE hard drive via the USB 2.0 port. The data was sent to a 120GB 7200 RPM High-Rely backup media. You should expect to see slower speeds when backing up over a network or when backing up slow hard drives and slower machines with lots of smaller files. Expect faster speeds when backing up large files, using faster “sector level” copy software, or on machines with highly efficient eSATA connections.

Over the network speeds will be considerably slower. 100MB networks produce on the order of 50MB/Min.

On a High-Rely system using the native Windows 2000 backup verify speeds are much faster than backup speeds. Unlike tape, which typically takes just as long to verify as to backup, verification of 10 or more times faster than the backup is possible. It’s not unusual to see your backup verify at over 1GB per minute.

5. Checking The Event Viewer for NTBackup problems It is important to review the Windows “event viewer” to see if the operating system is generating any errors or significant informational events during the backup process. Occasionally you will be able to see hardware problems or configuration problems that could indicate that your backup is not complete. To access the event viewer you can Right click on “My computer” and select “Manage”. You will see the event viewer as part of the management utilities. Using the events in Event Viewer, you can gather information about hardware, software, and system problems.

© Copyright 2006 Highly Reliable Systems Page 42 www.High-Rely.com Depending upon your machine configuration you may also be able to find an event viewer icon under Start, Programs, Administrative Tools. Power users often get into the event viewer by clicking Start, Run and then typing in “eventvwr.msc”

Windows 2000 records events in three kinds of logs: Application log - The application log contains events logged by applications or programs. For example, a database program might record a file error in the application log. The program developer decides which events to record. System log - The system log contains events logged by the Windows 2000 system components. For example, the failure of a driver or other system component to load during startup is recorded in the system log. The event types logged by system components are predetermined by Windows 2000. Security log - The security log can record security events such as valid and invalid logon attempts as well as events related to resource use such as creating, opening, or deleting files. An administrator can specify what events are recorded in the security log. For example, if you have enabled logon auditing, attempts to log on to the system are recorded in the security log.

For monitoring backups probably the most important is the “System Log”. However, you will typically see at least informational events associated with the NTbackup program in the “application log”.

The Event Viewer displays these types of events: Error - A significant problem, such as loss of data or loss of functionality. For example, if a service fails to load during startup, an error will be logged.

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 43 Warning - - An event that is not necessarily significant, but may indicate a possible future problem. For example, when disk space is low, a warning will be logged. Information - An event that describes the successful operation of an application, driver, or service. For example, when a network driver loads successfully, an Information event will be logged.

Application Log The application log is a good source for confirming a scheduled event such as a backup occurred. For example, you should see an event 8018 when NTbackup began its operation as shown in the graphic below.

Similarly, an 8019 event will be logged in the application log when your backup finishes. These times should essentially confirm those in the backup “report”

© Copyright 2006 Highly Reliable Systems Page 44 www.High-Rely.com System Log You should focus on events that occur during the times you know your backup job ran. There are thousands of possible “events” that can occur and it would be impractical to document them here. However, there are few types of events that are more common and we can provide some general tips that will help you look through your event logs.

Use the website www.eventid. or .microsoft.com. to look up what a particular event might mean.

Since the event log can be overwhelming in size, look for “6009” events in the System Log to mark times your machine rebooted. It is helpful to locate these and then scan upwards from the reboot to see errors that may have occurred since then

Look for events relating to the High-Rely drives. In particular, you may want to watch for device add or removal events, as well as “delayed write cache failures” that could indicate hardware problems with your high-rely device. See the graphic below for an example of event ID 51 demonstrating a possible compatibility or hardware problem during the backup process.

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 45 Monitoring NTbackup During the backup process the machine will be sluggish due to the amount of data being transferred. We recommend doing backups during off peak hours wherever possible. You can use the Windows (accessed at any time by hitting Ctrl-ALT-) processes tab to monitor the percentage of CPU and RAM usage the backup process is taking. As shown in the graphic below, the backup process is called ntbackup.exe. The cpu utilization as shown in the screen shot is 29%, meaning that 29% of the processor’s time at this moment is being used by the backup process. This number will fluctuate widely during the backup process.

© Copyright 2006 Highly Reliable Systems Page 46 www.High-Rely.com Backing Up Microsoft Exchange with NTbackup Exchange represents a unique challenge in that the service is “always on”. Traditionally, a file or database that is “open” during the backup will be skipped. To prevent a critical backup failure of Microsoft provides a mechanism to backup the “mailbox store” for Exchange servers. Basically, when Exchange is installed on a server an administration tool is added called the “System Manager”. Along with this tool comes a modification that allows NTBackup to “understand” how to backup open Exchange data stores. It is important to understand that this backup is “all or nothing”, meaning it is intended to restore the entire mail data set in case of disaster, but does not provide for backing up (or restoring) individual mailboxes or messages. This can be a problem in an enterprise environment where a critical e-mail is accidentally deleted. There is no way to recover this message without “rolling back” the entire mail store to the time of the backup. This could result in numerous other users losing messages received from that point forward.

If this is a problem in your organization, you may wish to consider third party software alternatives such as Veritas Backup Exec or Computer Associates Brightstor that have Microsoft Exchange specific “agent” software available to do what is known in the industry as ‘brick level” mail back up. An Alternative Exchange Mailbox backup Method

Because of the problem associated with restoring individual mailboxes as described above, if your organization does NOT have a third party backup product we highly recommend periodically exporting mailbox data out of the exchange database as an additional backup measure. Microsoft provides a utility to do this called exmerge that is included on the Exchange CD but not installed by default. Once installed and properly configured, a user with the proper rights can export individual mailboxes to a well

© Copyright 2006 Highly Reliable Systems www.High-Rely.com Page 47 known Microsoft mail format called a PST file. These files can subsequently be backed up to your high- rely media. Please refer to Microsoft’s website and search for instructions on installing and using exmerge. The following screenshots demonstrate that the exmerge process can be automated and

scheduled.

This job is also scheduled to run nightly in Scheduled tasks

To insure that the job runs select Advanced, View Log. The results of the exmerge process can be viewed by looking at the files in the root of C:\.

© Copyright 2006 Highly Reliable Systems Page 48 www.High-Rely.com Contact Information

Highly Reliable Systems 1900 Vassar Street Reno Nevada 89502-2109

TEL: 775-329-5139 FAX: 775-322-5397

www.high-rely.com